Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2007-4381

Опубликовано: 17 авг. 2007
Источник: nvd
CVSS2: 9.3
EPSS Средний

Описание

Unspecified vulnerability in the font parsing implementation in Sun JDK and JRE 5.0 Update 9 and earlier, and SDK and JRE 1.4.2_14 and earlier, allows remote attackers to perform unauthorized actions via an applet that grants certain privileges to itself.

Комментарий

Additional information regarding this CVE can be found at SecurityFocus: http://www.securityfocus.com/bid/25340

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:sun:jdk:*:update9:*:*:*:*:*:*
Версия до 1.5.0 (включая)
cpe:2.3:a:sun:jre:*:update14:*:*:*:*:*:*
Версия до 1.4.2 (включая)
cpe:2.3:a:sun:sdk:*:*:*:*:*:*:*:*
Версия до 1.4.2_14 (включая)

EPSS

Процентиль: 95%
0.1643
Средний

9.3 Critical

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

ubuntu
около 18 лет назад

Unspecified vulnerability in the font parsing implementation in Sun JDK and JRE 5.0 Update 9 and earlier, and SDK and JRE 1.4.2_14 and earlier, allows remote attackers to perform unauthorized actions via an applet that grants certain privileges to itself.

redhat
около 18 лет назад

Unspecified vulnerability in the font parsing implementation in Sun JDK and JRE 5.0 Update 9 and earlier, and SDK and JRE 1.4.2_14 and earlier, allows remote attackers to perform unauthorized actions via an applet that grants certain privileges to itself.

debian
около 18 лет назад

Unspecified vulnerability in the font parsing implementation in Sun JD ...

github
больше 3 лет назад

Unspecified vulnerability in the font parsing implementation in Sun JDK and JRE 5.0 Update 9 and earlier, and SDK and JRE 1.4.2_14 and earlier, allows remote attackers to perform unauthorized actions via an applet that grants certain privileges to itself.

EPSS

Процентиль: 95%
0.1643
Средний

9.3 Critical

CVSS2

Дефекты

NVD-CWE-Other